skills/mukul975/anthropic-cybersecurity-skills/hunting-for-command-and-control-beaconing/Gen Agent Trust Hub
hunting-for-command-and-control-beaconing
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted network telemetry (DNS queries, HTTP user agents, domain names) from external log files. This data is attacker-controlled and could contain malicious instructions designed to influence an agent reviewing the analysis results.
- Ingestion points:
scripts/agent.pyandscripts/process.pyread data from Zeek logs, CSVs, and JSON files. - Boundary markers: No explicit delimiters or boundary markers are used to wrap extracted log fields when generating findings or reports.
- Capability inventory: The skill performs local file reading and writing. No network or subprocess capabilities are utilized in the provided Python scripts.
- Sanitization: Input is parsed and used for statistical calculations or regex matching, which mitigates direct execution risks but leaves the resulting text subject to analysis by downstream AI agents.
Audit Metadata